What if additional security flaws are discovered in the XCP or Mediamax 3 or 5 DRM schemes?
The best way that consumers can protect themselves is to ditch their bad CDs and download the MP3 files, or, in the case of XCP disks, send them in and get CD versions without DRM. Then uninstall the DRM by using one the uninstallers (XCP Uninstaller, MediaMax Unistaller). For any future DRM that Sony decides to put on disks — they aren’t putting any DRM on any CDs right now — Sony has agreed to independent security review before they ship any disks to the public with DRM. Sony has also agreed to continue discussions with EFF about Sony’s future use of DRM. And if security vulnerabilities are discovered in any future DRM, Sony BMG has agreed to a process where they need to react quickly to any reports, including investigating claimed vulnerabilities and developing patches or other fixes. The process also requires them to notify the lawyers involved if they cannot patch the problem quickly. The process is subject to court order, making it easy for the lawyers to go back and get the co
